Patch by Luca Bolcioni <Luca.Bolcioni@yacme.com>. Ensure we always

initialise the session key.  Fixes segfaults with security=server, and
encrypt passwords = no.

Andrew Bartlett
(This used to be commit 493ac5ce98fa3fcddb596139240dd762e70d4ac3)

diff --git a/source3/smbd/sesssetup.c b/source3/smbd/sesssetup.c
index 9405c065e182e9af47cc781efeaaa4aac26dfea6..c42a35e809c38831a7bab4cc75cb89f2b8f74c10 100644 (file)
--- a/source3/smbd/sesssetup.c
+++ b/source3/smbd/sesssetup.c
@@ -876,6 +876,8 @@ int reply_sesssetup_and_X(connection_struct *conn, char *inbuf,char *outbuf,
                session_key = data_blob(NULL, 16);
                SMBsesskeygen_lmv1(server_info->lm_session_key.data, lm_resp.data, 
                                   session_key.data);
+       } else {
+               session_key = data_blob(NULL, 0);
        }
 
        data_blob_free(&lm_resp);